Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
4 detections
Filters
Last updated
All Time
Detection languages
4
Contributors
3
1
Categories
2
1
1
1
1
Platforms
3
1
Products / Services
3
1
1
1
MITRE Techniques
18,114
15,633
12,576
8,388
6,214
KQL Query from file: Fortigate Belsen Leak KQL Check
KQL Query from file: defendnot detection
KQL Query from file: MDE KQL to detect UAC bypass of Fickle Stealer
Original Sigma Rule: https://github.com/Neo23x0/sigma/blob/master/rules/apt/apt_apt29_thinktanks.yml.
Questions via Twitter: @janvonkirchheim.
Questions via Twitter: @janvonkirchheim.
